CGA-JGQC-5RVH-XCHJ

Bulletin has no description...

CGA-R362-2HCW-2HM5

Bulletin has no description...

CGA-7QXG-G8WJ-G5MM

Bulletin has no description...

CGA-H5CV-5C27-9W6M

Bulletin has no description...

CGA-J7J6-697X-FJ5J

Bulletin has no description...

CGA-82W2-3JQ2-QRQ9

Bulletin has no description...

CGA-222P-WJ37-5V8H

Bulletin has no description...

CGA-646V-67MQ-87MR

Bulletin has no description...

CGA-636P-XJRR-9WGV

Bulletin has no description...

MINI-CG54-5CXX-PFXV

Bulletin has no description...

MINI-H8FM-6JJ7-FRPH

Bulletin has no description...

MINI-PP4C-3WXJ-9X8M

Bulletin has no description...

MINI-8R87-65C9-4GR2

Bulletin has no description...

MINI-XP5M-J82J-47C8

Bulletin has no description...

MINI-9CCP-9QJM-R2QW

Bulletin has no description...

MINI-RP5P-F8PW-RV8X

Bulletin has no description...

MINI-PF39-4F2G-674F

Bulletin has no description...

MINI-X2FX-4QRM-M8J3

Bulletin has no description...

MINI-98JV-2XXP-3XH3

Bulletin has no description...

MINI-5RW3-4JW4-FH4R

Bulletin has no description...

MINI-FG4X-JH6J-C22H

Bulletin has no description...

MINI-X2CF-PM64-2F5R

Bulletin has no description...

MINI-PJ54-F4W7-V7F7

Bulletin has no description...

MINI-GH6X-W3F4-QM2R

Bulletin has no description...

MINI-722G-6H8W-QV2C

Bulletin has no description...

CVE-2026-94277 Stored Cross-Site Scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name

MISP's galaxy matrix statistics view app/View/Users/statisticsgalaxymatrix.ctp renders the galaxy name directly into HTML output via sprintf without any HTML encoding. An authenticated user holding the permgalaxyeditor permission can create or modify a galaxy whose name contains arbitrary HTML or...

ROOT-APP-PYPI-CVE-2026-50271 CVE-2026-50271 in ddtrace - Patched by Root

Root has patched CVE-2026-50271 in the ddtrace package for Root:PyPI. Multiple fixed versions available...

SUSE-SU-2026:4276-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scalenearestneighbor via duplicate alpha planes from nested iden/auxl items bsc1279443. - CVE-2026-84384: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS...

CGA-8X9X-PHHC-GFFQ

Bulletin has no description...

CGA-R96G-JW65-HC4H

Bulletin has no description...

CGA-8FQH-VMRJ-68G8

Bulletin has no description...

CGA-6P4C-R9H8-X7MG

Bulletin has no description...

ROOT-APP-NPM-CVE-2026-64644 CVE-2026-64644 in next - Patched by Root

Root has patched CVE-2026-64644 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64648 CVE-2026-64648 in next - Patched by Root

Root has patched CVE-2026-64648 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64643 CVE-2026-64643 in next - Patched by Root

Root has patched CVE-2026-64643 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64646 CVE-2026-64646 in next - Patched by Root

Root has patched CVE-2026-64646 in the next package for Root:npm. Multiple fixed versions available...

BIT-PYTHON-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

BIT-PYTHON-MIN-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

BIT-LIBPYTHON-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

CVE-2025-12999

UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request headers, with no check on whether the sender was a trusted proxy, falling back to the client-supplied Host header...

BIT-ENVOY-GATEWAY-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

BIT-ENVOY-GATEWAY-2026-53718 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API...

BIT-ENVOY-GATEWAY-2026-53717 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...

BIT-ENVOY-GATEWAY-2026-53716 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled...

BIT-ENVOY-GATEWAY-2026-53715 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...

BIT-ENVOY-GATEWAY-2026-53714 Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

BIT-ENVOY-GATEWAY-2026-53713 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...

SUSE-SU-2026:23459-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...

SUSE-SU-2026:21461-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...

DEBIAN-CVE-2026-47321

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...